Wood River Federal

Project Manager

• Lead planning, execution, monitoring, and final delivery of complex IT modernization, engineering, or mission-critical technical projects
• Direct end-to-end project lifecycle activities from initiation through closing
• Define project scope, project charters, work breakdown structures (WBS), and milestones aligned with client objectives
• Develop and maintain project schedules, cost baselines, and resource allocations
• Track project performance using Earned Value Management (EVM) and key performance indicators (KPIs)
• Identify, analyze, and manage technical and operational risks; maintain risk registers and execute mitigation strategies
• Serve as primary point of contact for government and enterprise clients, PMOs, and prime contractor leadership
• Conduct formal status updates, monthly progress reviews, and executive briefings
• Coordinate and direct multidisciplinary teams of engineers, analysts, security specialists, and developers
• Ensure adherence to governance frameworks, quality assurance standards, and task order requirements
• Support contract administration, task order deliverables, and vendor procurement tasks
• Evaluate subcontractor performance against technical milestones and service level agreements (SLAs)
• Facilitate Agile/Scrum or traditional Waterfall methodologies according to program needs
• Align day-to-day project operations with strategic goals, contractual requirements, and federal standards

Analyst

• Perform end-to-end identification and mapping of legacy, enterprise, and custom applications across on-premises and cloud infrastructures using discovery tools and stakeholder interviews
• Analyze application hosting environments, database dependencies, network protocols, server configurations, authentication methods, and data flows
• Conduct technical discovery interviews with System Owners, Application Owners, Lead Developers, and Systems Engineers to complete detailed application profiles and questionnaires
• Document upstream and downstream dependencies, application interconnections, API integrations, and user access patterns to minimize service disruption during migrations or security policy deployments
• Maintain accurate records in Configuration Management Databases (CMDB), Application Portfolio Management (APM) tools, or discovery repositories
• Identify technical debt, legacy protocols, obsolete frameworks, and potential blockers that could hinder application migration or security capability integration
• Assist in drafting technical artifacts, dependency matrices, application discovery reports, and executive summaries to inform project roadmaps and leadership decisions

Application Discovery Analyst

Risk

• Design, configure, deploy, and maintain SailPoint IdentityIQ or SailPoint Identity Security Cloud platforms
• Develop custom workflows, rules, forms, policies, and BeanShell/Java scripts
• Integrate enterprise applications, databases, directories, and cloud services with SailPoint using web services, REST APIs, SCIM connectors, and custom integrations
• Build and maintain automated provisioning and de-provisioning processes for Joiner, Mover, and Leaver events across hybrid infrastructures
• Configure and manage periodic access certification campaigns, entitlement catalog structures, and Separation of Duties enforcement policies
• Support the design, implementation, and maintenance of Role-Based Access Control and Attribute-Based Access Control models
• Perform system health checks, performance tuning, patching, version upgrades, and database maintenance across non-production and production SailPoint environments
• Ensure SailPoint configurations align with DoD/Federal cybersecurity standards, STIG compliance, NIST SP 800-53 controls, and Authority to Operate assessments
• Serve as the senior technical escalation point for provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks
• Work closely with security architects, systems administrators, and application owners to support integration, compliance automation, and operational resilience

Identity Governance and Administration Engineer

Engineer

• Design, build, configure, and maintain Radiant Logic RadiantOne FID/VDS instances across complex hybrid environments
• Develop, manage, and optimize unified identity views, object mapping, schema extensions, and entitlement aggregation models
• Connect, join, translate, and synthesize identity data from Active Directory, Microsoft Entra ID, LDAP directories, relational databases, web services/APIs, and flat files
• Write and maintain advanced mapping, join logic, cascading rules, computed attributes, and real-time synchronization pipelines
• Implement dynamic context and attribute feeds for Policy Decision Points and Policy Enforcement Points
• Perform load balancing, context caching, indexing optimization, cluster synchronization, and performance tuning for Radiant Logic clusters
• Manage platform upgrades, version migrations, cluster health checks, backup/disaster recovery procedures, and STIG-compliant security hardening
• Serve as the senior technical escalation point for synchronization failures, identity resolution edge cases, schema inconsistencies, and directory performance degradation

Master Entitlement Record Engineer – Radiant Logic

Business Operations

• Model complex business, operational, and technical workflows
• Develop current-state ("as-is") and future-state ("to-be") process maps using BPMN 2.0 and UML
• Conduct root-cause analysis, value-stream mapping, and gap analyses
• Identify bottlenecks, redundancies, and manual friction points
• Re-engineer processes to maximize efficiency, consistency, and compliance
• Lead discovery workshops, interviews, and working groups with technical leads, program managers, system architects, and executive stakeholders
• Capture operational requirements and dependencies
• Establish performance baselines, KPIs, and target metrics
• Track continuous process improvement over time
• Author, standardize, and maintain SOPs, process charters, playbooks, work instructions, and policy alignment documentation
• Collaborate with organizational change management teams on implementation plans, training materials, and communication strategies
• Partner with enterprise architects and software development teams to translate optimized processes into functional system requirements, automation workflows, or enterprise software updates

Business Process Engineer

• Architect, design, implement, and administer enterprise-level Privileged Identity Management (PIM) and Privileged Access Management (PAM) solutions
• Design, deploy, configure, and maintain PIM/PAM solutions across enterprise, cloud, and hybrid environments
• Manage privileged-account lifecycles, including automated vaulting, password rotation, privileged session management, and just-in-time (JIT) access
• Integrate PIM/PAM tools with identity providers, IGA, SIEM, and ticketing systems such as ServiceNow using APIs and custom scripting
• Define, implement, and enforce least-privilege, role-based access control (RBAC), and attribute-based access control (ABAC) policies
• Conduct discovery audits to identify unmanaged privileged accounts, service accounts, and secrets and bring them under centralized management
• Provide tier-3 technical support for complex identity infrastructure issues, upgrades, patches, and disaster recovery drills
• Support continuous monitoring and audit readiness by generating compliance reports and ensuring adherence to federal and DoD security frameworks

PIM/PAM Engineer

DevOps Engineer

• Design and manage end-to-end CI/CD pipelines across local servers and cloud environments
• Manage local hardware and cloud environments as code
• Design, build, document, and maintain secure, scalable RESTful APIs, microservices, and web services
• Enable integration between on-premises applications, cloud-native services, and third-party systems
• Manage and monitor networking, API request routing, and data synchronization between on-premises storage and cloud-native services
• Apply site-reliability best practices to ensure continuous service delivery, API resilience, and high availability
• Embed security scanning, compliance checks, API authentication protocols, and rate limiting into the development lifecycle
• Identify opportunities to replace manual workflows with scalable programmatic solutions and automated API integrations
• Bridge engineering complexities and business objectives
• Provide leadership during system outages, API failures, and production incidents

DevSecOps Engineer

Solutions Engineer

• Act as a liaison to communicate client needs with architectural and engineering teams, ensuring clear communication and a smooth flow of information
• Work closely with solution architects to translate business requirements into technical designs
• Maintain and update technical documentation, including architectural diagrams, design patterns, and engineering best practices
• Research technologies and evaluate their potential use in solutions, providing feedback and recommendations to the architecture team

Engineering and Solution Architecture Support Engineer

• Evaluate, develop, and align enterprise ICAM policy frameworks, governance structures, and security standards
• Bridge technical identity architecture and regulatory compliance across federal, defense, or enterprise environments
• Ensure identity lifecycle management, digital identity standards, access control models, and Zero Trust Architecture mandates comply with federal directives, defense standards, and NIST guidelines
• Draft, review, update, and operationalize enterprise-level ICAM governance documents, strategic roadmaps, policy directives, and SOPs
• Align agency identity policies with federal mandates, executive orders, NIST guidelines, and DoD ICAM strategies
• Provide policy oversight and compliance guidance for PKI, PIV/CAC integration, SSO, federated identity, PAM, and IGA capabilities
• Evaluate ABAC and RBAC access control policies to support Zero Trust Architecture pillars and micro-segmentation strategies
• Perform gap analyses, policy reviews, and risk assessments on legacy and emerging systems
• Lead policy working groups, inter-agency ICAM forums, and consensus-building sessions
• Prepare compliance artifacts, policy briefs, decision memos, and executive presentations for agency leadership, inspectors general, or external audit bodies

ICAM Policy Analyst

• Design and implement identity-based access control policies adhering to Zero Trust principles
• Lead deployment, configuration, and optimization of PingFederate and PingAccess for SSO and ABAC
• Manage the full ICAM lifecycle, including automated provisioning and complex directory integrations
• Collaborate with SOC and Network teams to integrate identity signals into security monitoring and incident response workflows
• Integrate PingFederate as the core IdP with PAM, MUR, and IGA components
• Create and maintain MFA and RBA authentication policies
• Provide guidance and hands-on training for onboarding applications into PingFederate using self-service templates, OIDC, and SAML
• Serve as the primary architect and administrator for enterprise identity services